vBulletin very easy to hacked ?

What's going on here...?

In last few days hackers party a lot with vBulletin forum :

***link removed***

I don't care with their reason, but the fact he can hacked few vBulletin forum easily made me think....how weak security in vBulletin. The situation is the fact.

Any opinion...? or providing security patch...?

[Max Taxable]

Originally Posted by Pablo18

.how weak security in vBulletin.

As weak as the owner/installer/admin makes it.

Originally Posted by Max Taxable

As weak as the owner/installer/admin makes it.

Oh really...? Are you sure...? I don't think so.

This hackers clearly using the bugs in sytem, don't always blame owner/installer/admin.

The story will be different if security patch always update..

[kh99]

How do you know how it's being done?

[Max Taxable]

Originally Posted by Pablo18

Oh really...? Are you sure...? I don't think so.

This hackers clearly using the bugs in sytem, don't always blame owner/installer/admin.

The story will be different if security patch always update..

I've had vBulletin installations for many years, going back at least to 2004. Never been "hacked," cracked, defaced, anything.

There's not any web pages that don't have some kind of exploit in them, vBulletin's not alone there.

The story will be different if security patch always update..

Which, does depend on the owner/admin to apply in a timely manner.

[Paul M]

Originally Posted by Pablo18

....how weak security in vBulletin.

It isnt. There are no known exploits at this time.

Originally Posted by Pablo18

The situation is the fact.

What facts ?
Do you have solid proof on how they were hacked ?

No ? then you have no "facts".

[trackpads]

Agreed with Paul.

My 2 cents. You are always at risk of something bad happening. That is the risk you take. You mitigate risk by backing up/testing backups and doing your utmost to secure your site AND your server.

Some of these hacks could have been done at the server level, not just software. You just don't know. Every major hosting provider has had successful attacks. You learn, adapt and move on.

In the case with IQ69, I found on their twitter feed, that group that hacked them is claiming to have all 50GB their data. To get that kind of access you need console access. No one can sqldump 50GB from the phpmyadmin interface. Plus the files etc are not just available because you have a admin password. They have ftp access too.

a. NONE of your logins and passwords should be the same. If your ftp, cpanel, root, forum and others admin logins are all the same then you are screwing yourself.

b. Use secure server software with a provider that has the latest updates. Cpanel etc.

c. BACKUP!!!!!

d. BACKUP off site!!!!

Hope this helps,

-Jason Edwards, CISSP

--------------- Added [DATE]1354978181[/DATE] at [TIME]1354978181[/TIME] ---------------

Secondly,

Use a Firewall or Proxy service. Some attacks can be foiled by a good proxy. I use cloudflare and have found it to be usefull. Does require some tooling to get some Vbulletin mods to work but it has blocked massive amounts of malicious ip traffic from ever reaching my site. IT can also cache and do other improvements as well that will speed up your site.

[puertoblack2003]

vbulletin has nothing to do with exploits. It's server side. I remember reading it somewhere.

Can we have some content-wise discussion about the subject? Because the thing would be interesting if there were some facts, code or something.

My humble guess also would be that you're posting a link to your own twitter profile Pablo to make it more popular since you have 0 posts here, otherwise I don't understand why someone suddenly came here, registered and posted this.

[Max Taxable]

Originally Posted by puertoblack2003

vbulletin has nothing to do with exploits. It's server side. I remember reading it somewhere.

There can be some exploits installed via bad skins for example, and some after market mods leave security holes and cause risk. A "exploit" is any entry point for everything from script kiddies to hard core black hat hackers.